Post-routing networking method, device and equipment based on 5GVPDN

Abstract

The invention relates to the technical field of communication, in particular to a post-routing networking method, a post-routing networking device and post-routing networking equipment based on 5GVPDN, primary authentication is carried out by receiving a networking session request initiated by wireless networking equipment, necessary information configuration of networking is completed, and after the primary authentication is passed, the networking is completed. The control authentication module feeds back tunnel protocol response information and downlink equipment routing information to the session management module so as to synchronously realize establishment of a communication channel and post-routing of downlink equipment of the wireless networking equipment, and the session management module transmits the tunnel protocol response information and the downlink equipment routing information to the routing forwarding module; the method comprises the following steps: receiving tunnel protocol response information sent by a wireless networking device, establishing a communication tunnel with a tunnel network module through a routing forwarding module according to the tunnel protocol response information so as to carry out secondary authentication and improve the networking effect, and after the secondary authentication is passed, sending a networking session response to the wireless networking device through the routing forwarding module so as to complete the establishment of the communication tunnel. And the establishment steps of the traditional communication tunnel are simplified.

Description

Technical Field

[0001] The present invention relates to the field of communication technology, and in particular to a post-routing networking method, device and equipment based on 5G VPDN. Background Art

[0002] The existing 5G network has deployed a VPDN solution based on L2TP tunnels to provide private network services for enterprises. In addition to this VPDN service, other VPDN private network services can also be provided to new customers. 5G L2TP networking ensures the security of data transmission. When using wireless devices to build mobile office networks, if enterprise users want to achieve mutual access between branch node networks and headquarters networks, the traditional solution is to use tunnel technologies such as VxLAN and GRE to achieve communication between downstream devices and servers. For example: VxLAN encapsulates the original Ethernet message in a UDP data packet and adds a VxLAN header.

[0003] The above method has problems such as low transmission efficiency due to the large packet header after tunnel superposition, difficulty in managing downstream equipment, and high performance requirements for networking equipment.

[0004] The above contents are only used to assist in understanding the technical solution of the present invention and do not constitute an admission that the above contents are prior art. Summary of the invention

[0005] The main purpose of the present invention is to provide a post-routing networking method, device and equipment based on 5GVPDN, aiming to solve the technical problems in the prior art that when the downstream devices of wireless networking devices communicate with the intranet server, there are low transmission efficiency, difficult management of downstream devices and high performance requirements of networking devices.

[0006] To achieve the above object, the present invention provides a post-routing networking method based on 5G VPDN, the post-routing networking method based on 5G VPDN is applied to a networking management server, the networking management server at least includes: an access and mobility management module, a session management module, a routing forwarding module, a tunnel network module and an authentication module;

[0007] The method comprises the following steps:

[0008] In response to a registration request initiated by a wireless networking device, sending customized dialing information corresponding to the wireless networking device to the wireless networking device;

[0009] Receiving a networking session request initiated by the wireless networking device through the access and mobility management module, and performing an authentication according to the networking session request;

[0010] After the authentication is passed once, the authentication module feeds back tunnel protocol response information and downlink device routing information to the session management module;

[0011] The session management module transmits the tunnel protocol response information and the downlink device routing information to the routing forwarding module;

[0012] The routing forwarding module establishes a communication tunnel with the tunnel network module according to the tunnel protocol response information, and forwards the customized dialing information to the tunnel network module through the communication tunnel;

[0013] The tunnel network module performs secondary authentication according to the customized dialing information;

[0014] After the secondary authentication is passed, a networking session response is sent to the wireless networking device through the routing forwarding module to establish a VPDN communication tunnel between the wireless networking device and the server.

[0015] Optionally, the session management module transmits the tunnel protocol response information and the downlink device routing information to the routing forwarding module, including:

[0016] The session management module inserts the downstream device routing information into the downstream device routing table to obtain the target downstream device routing table;

[0017] Generate first PFCP response information according to the target downlink device routing table and the tunnel protocol response information;

[0018] The first PFCP response information is transmitted to the routing forwarding module.

[0019] Optionally, in response to a registration request initiated by a wireless networking device, sending customized dialing information corresponding to the wireless networking device to the wireless networking device includes:

[0020] Establishing a public data network channel with the wireless access device;

[0021] Receiving the terminal information and SIM card information of the wireless access device through the public data network channel;

[0022] Generate customized dialing information based on the terminal information and SIM card information;

[0023] The customized dialing information is sent to the wireless networking device through the public data network channel.

[0024] Optionally, sending a networking session response to the wireless networking device through the routing forwarding module includes:

[0025] Sending a second PFCP response message to the session management module through the routing forwarding module, wherein the second PFCP response message carries a networking session response;

[0026] The networking session response is sent to the wireless networking device through the first interface, or the networking session response is sent to the access and mobility management module through the second interface, so that the access and mobility management module forwards the networking session response to the wireless networking device.

[0027] Optionally, the post-routing networking method based on 5G VPDN further includes:

[0028] In response to a communication request from a downlink device, obtaining an uplink data packet carried in the communication request;

[0029] The routing forwarding module encapsulates the uplink data packet to obtain an encapsulated uplink data packet;

[0030] Sending the encapsulated uplink data packet to the tunnel network module via the VPDN tunnel;

[0031] The tunnel network module decapsulates the encapsulated uplink data packet and forwards it to the server.

[0032] Optionally, the post-routing networking method based on 5G VPDN further includes:

[0033] Receiving a downlink data packet sent by the server;

[0034] The tunnel network module encapsulates the downlink data packet to obtain an encapsulated downlink data packet;

[0035] The tunnel network module sends the encapsulated downlink data packet to the routing forwarding module through the VPDN tunnel;

[0036] The routing forwarding module decapsulates the encapsulated downlink data packet to obtain a downlink data message and routing information;

[0037] The downlink data message is sent to the wireless networking device based on the routing information, so that the wireless networking device forwards the downlink data message to the downlink device corresponding to the routing information.

[0038] Optionally, the post-routing networking method based on 5G VPDN further includes:

[0039] Performing networking data configuration on the wireless networking device and the downstream device of the wireless networking device;

[0040] The networking data configuration includes domain name configuration and number card configuration.

[0041] In addition, to achieve the above-mentioned purpose, the present invention also proposes a post-routing networking device based on 5G VPDN, and the post-routing networking device based on 5G VPDN includes:

[0042] An information sending module, used for sending customized dialing information corresponding to the wireless networking device to the wireless networking device in response to a registration request initiated by the wireless networking device;

[0043] A primary authentication module, configured to receive a networking session request initiated by the wireless networking device through the access and mobility management module, and perform a primary authentication according to the networking session request;

[0044] An information feedback module, configured to, after the authentication is passed once, cause the authentication module to feed back tunnel protocol response information and downlink device routing information to the session management module;

[0045] An information forwarding module, used for the session management module to transmit the tunnel protocol response information and the downlink device routing information to the routing forwarding module;

[0046] A tunnel establishment module, used for the routing forwarding module to establish a communication tunnel with the tunnel network module according to the tunnel protocol response information, and forward the customized dialing information to the tunnel network module through the communication tunnel;

[0047] A secondary authentication module, used for the tunnel network module to perform secondary authentication according to the customized dialing information;

[0048] The response feedback module is used to send a networking session response to the wireless networking device through the routing forwarding module after the secondary authentication is passed, so as to establish a VPDN communication tunnel between the wireless networking device and the server.

[0049] In addition, to achieve the above-mentioned purpose, the present invention also proposes a post-routing networking device based on 5G VPDN, and the post-routing networking device based on 5G VPDN includes: a memory, a processor, and a post-routing networking program based on 5G VPDN stored in the memory and executable on the processor, and the post-routing networking program based on 5G VPDN is configured to implement the steps of the post-routing networking method based on 5G VPDN as described above.

[0050] In addition, to achieve the above-mentioned purpose, the present invention also proposes a storage medium, on which a post-routing networking program based on 5G VPDN is stored. When the post-routing networking program based on 5G VPDN is executed by a processor, the steps of the post-routing networking method based on 5G VPDN as described above are implemented.

[0051] In addition, to achieve the above-mentioned purpose, the present application also provides a computer program product, which includes a computer program, and when the computer program is executed by a processor, it implements the steps of the post-routing networking method based on 5G VPDN as described above.

[0052] One or more technical solutions proposed in the present invention have at least the following technical effects: the present invention performs an authentication by receiving a networking session request initiated by a wireless networking device to complete the necessary information configuration for networking. After one authentication is passed, the control authentication module feeds back the tunnel protocol response information and the downstream device routing information to the session management module to synchronously realize the establishment of the communication channel and the subsequent routing of the downstream device of the wireless networking device. The session management module transmits the tunnel protocol response information and the downstream device routing information to the routing forwarding module, and establishes a communication tunnel between the tunnel network module according to the tunnel protocol response information through the routing forwarding module, so as to facilitate secondary authentication and improve the networking effect. After the secondary authentication is passed, the routing forwarding module sends a networking session response to the wireless networking device to complete the establishment of the communication tunnel, simplifying the steps for establishing the traditional communication tunnel and avoiding the technical problems of low transmission efficiency, difficult management of downstream devices and high performance requirements of networking devices when the downstream devices of the wireless networking device communicate with the Internet in the prior art. BRIEF DESCRIPTION OF THE DRAWINGS

[0053] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0054] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.

[0055] Figure 1 This is a flow chart of the first embodiment of the post-routing networking method based on 5G VPDN of the present invention;

[0056] Figure 2 This is a schematic diagram of the architecture of a networking management server of an embodiment of a post-routing networking method based on 5G VPDN of the present invention;

[0057] Figure 3 A schematic diagram of the networking management process of an embodiment of a post-routing networking method based on 5G VPDN of the present invention;

[0058] Figure 4 It is a flow chart of the second embodiment of the post-routing networking method based on 5G VPDN of the present invention;

[0059] Figure 5 A schematic diagram of the process of establishing a VPDN tunnel and data uplink and downlink according to an embodiment of a post-routing networking method based on 5G VPDN of the present invention;

[0060] Figure 6 This is a flow chart of networking data configuration of an embodiment of a post-routing networking method based on 5G VPDN of the present invention;

[0061] Figure 7 This is a structural block diagram of the first embodiment of the post-routing networking device based on 5G VPDN of the present invention;

[0062] Figure 8 It is a structural diagram of a 5G VPDN-based post-routing networking device in the hardware operating environment involved in an embodiment of the present invention.

[0063] The realization of the purpose, functional features and advantages of the present invention will be further explained in conjunction with embodiments and with reference to the accompanying drawings. DETAILED DESCRIPTION

[0064] It should be understood that the specific embodiments described herein are only used to explain the technical solutions of the present application and are not used to limit the present application.

[0065] In order to better understand the technical solution of the present application, a detailed description will be given below in conjunction with the accompanying drawings and specific implementation methods.

[0066] Based on this, the embodiment of the present invention provides a post-routing networking method based on 5G VPDN, referring to Figure 1 , Figure 1 The present invention is a flowchart of a first embodiment of a post-routing networking method based on 5G VPDN.

[0067] In this embodiment, the post-routing networking method based on 5G VPDN includes:

[0068] Step S10: In response to the registration request initiated by the wireless networking device, the customized dialing information corresponding to the wireless networking device is sent to the wireless networking device.

[0069] It should be noted that the execution subject of this embodiment may be a computing service device with data processing, network communication and program running functions, such as a tablet computer, a personal computer, a mobile phone, etc., or an electronic device capable of realizing the above functions, a network management server, etc. The following takes the network management server as an example to illustrate this embodiment and the following embodiments.

[0070] refer to Figure 2 , Figure 2This is a schematic diagram of the architecture of the network management server in this embodiment. Specifically, the network management server includes at least: an access and mobility management module (Access and Mobility Management Function, AMF), a session management module (Session Management FunctionSMF), a routing forwarding module (User PlaneFunction, UPF), a tunnel network module (L2TP Network Server, LNS) and an authentication module.

[0071] Among them, the authentication module is mainly used for AAA authentication. In this embodiment, AAA authentication is divided into primary AAA authentication and secondary AAA authentication. The authentication data used in the two AAA authentications are different, and their purpose is to detect the security of networking devices.

[0072] Customized dial-up information is mainly used to build an independent VPDN tunnel to achieve data transmission in a private network and improve the security of data transmission.

[0073] Further, in response to the registration request initiated by the wireless networking device, sending customized dialing information corresponding to the wireless networking device to the wireless networking device includes:

[0074] Establishing a public data network channel with the wireless access device;

[0075] Receiving the terminal information and SIM card information of the wireless access device through the public data network channel;

[0076] Generate customized dialing information based on the terminal information and SIM card information;

[0077] The customized dialing information is sent to the wireless networking device through the public data network channel.

[0078] In the specific implementation, refer to Figure 3 , Figure 3 This is a schematic diagram of the network management process of this embodiment. First, after the wireless access device is powered on, the public DNN dialing can be used to complete registration and session creation. The public DNN establishes a public management channel with the customer terminal equipment (Customer Premises Equipment, CPE) and the network management platform.

[0079] Among them, after the public DNN management channel is established, the wireless access device reports the terminal information and SIM card information through the management channel in the field format of the object model. The CPE terminal standard object model supports four types of services: data reporting, command issuance, command response, and event reporting. For the related attributes of the downstream device information, it supports reporting and issuing single or multiple device information. The networking management platform completes the authentication of the access device, and issues the customized dialing information DNN dialing information, account number, password and other information of the SIM card contract, and simultaneously issues the downstream device management information.

[0080] The networking management platform can achieve unified access and management of enterprise customers, support operation and maintenance support and statistical analysis, perform simulated dialing tests, real-time troubleshooting, monitoring and alarming on terminals and networks, and provide multi-dimensional analysis of terminal use, network quality, business use, etc. through statistical analysis capabilities to help enterprises optimize networking strategies.

[0081] The customized dialing information includes, but is not limited to, customized dialing information DNN, account number, password, protection algorithm, maximum uplink and downlink rates, SSC mode and IP type supported by the session, and other information.

[0082] Step S20: receiving a networking session request initiated by the wireless networking device through the access and mobility management module, and performing an authentication according to the networking session request.

[0083] It should be understood that the networking session request contains at least information such as PDU session ID, key, protection algorithm, maximum uplink and downlink rates, SSC mode and IP type supported by the session, which can be used for subsequent multiple AAA authentications.

[0084] In a specific implementation, the access and mobility management module receives a networking session request initiated by the wireless networking device, and the step of performing an authentication based on the networking session request specifically includes: after receiving a PDU networking session request initiated by the wireless networking device through the access and mobility management module, the session management module is requested to generate an SM context, and the session management module SMF sends an AAA authentication request message to the authentication module to implement an authentication.

[0085] Among them, the SM context includes but is not limited to PDU session identifier, QoS configuration, charging rules, user location information, RAT type (radio access technology), S-NSSAI (single network slice selection auxiliary information), MBR (maximum bit rate), etc. By maintaining these detailed context data, SMF can effectively manage and control the communication connection between the user equipment (UE) and the data network (DN) to ensure the quality and efficiency of the service.

[0086] Step S30: After the authentication is passed once, the authentication module feeds back tunnel protocol response information and downlink device routing information to the session management module.

[0087] In the specific implementation, the AAA server authenticates the user once and sends corresponding information according to the service type signed by the user. After the AAA authentication is passed, the tunnel protocol response information LNS and the user's corresponding downstream device routing information are sent in the response message, where the LNS information at least includes LNS IP, tunnel key, Hostname, etc.

[0088] This embodiment combines 5G VPDN and back-routing to enable multiple terminals under the branch point wireless networking device to access the network and conduct two-way data services with network-side devices through tunnels. 5GVPDN uses a customized DNN private network to build a secure tunnel between UPF and customer LNS. Wireless devices can safely enter the intranet through the tunnel, and back-routing technology is used to achieve two-way mutual access between the terminals under the wireless networking device and the intranet devices. The platform can meet the networking management needs of enterprise customers, and the access authentication and management of wireless devices and downstream devices can be achieved by managing DNN channels on the networking management platform. At the same time, the platform can configure networking data to networking network elements and support the completion of processes such as session creation, authentication, channel establishment, and address allocation in the network.

[0089] Among them, VPDN authentication and tunnel can ensure the security of wireless device access and data packet transmission, and post-routing and platform networking can further manage the downstream devices, build an end-to-end secure channel, use customized DNN to build VPDN tunnel to achieve network isolation, and transmit private data in the private network; the post-routing function can realize the IP mutual access strategy between the downstream device and the network side realized by GRE three-layer tunnel or VxLAN large two-layer technology, and avoid the secondary tunnel encapsulation of the message to improve the transmission efficiency; in the session establishment process, only one authentication process is needed to complete the LNS docking information and the downstream terminal routing information, and the VPDN tunnel and post-routing channel construction can be completed in one session;

[0090] The mutual access capability achieved by the integration of 5G VPDN and back-routing technology is particularly suitable for mobile office networking scenarios. Combined with 5G networks and wireless networking equipment, enterprise intranet resources can be securely accessed through VPDN tunnels without the need for additional hardware devices to hang terminals. This embodiment can be simply modified and implemented on the existing 5G VPDN network. Compared with traditional dedicated line networks, this method has low cost and fast deployment. Combined with the platform networking capabilities, it can quickly respond to changes in the business needs of enterprises. The dual DNN capabilities supported by wireless terminals and number cards can achieve separation of the network's management channel and data channel, making networking more secure and convenient.

[0091] Step S40: the session management module transmits the tunnel protocol response information and the downlink device routing information to the routing forwarding module.

[0092] It should be noted that the tunnel protocol response information LNS is used to provide secure network access services for remote users, and in this embodiment is used as a bridge between the public network and the private network, that is, as a transfer between the wireless networking device and the server.

[0093] Furthermore, the session management module transmits the tunnel protocol response information and the downlink device routing information to the routing forwarding module, including:

[0094] The session management module inserts the downstream device routing information into the downstream device routing table to obtain the target downstream device routing table;

[0095] Generate first PFCP response information according to the target downlink device routing table and the tunnel protocol response information;

[0096] The first PFCP response information is transmitted to the routing forwarding module.

[0097] In the specific implementation, as a response to the PDU session establishment request, the session management module SMF notifies the access and mobility management module AMF of the result of the session establishment, and SMF inserts the routing information in the authentication response message into the SMF routing table, obtains the target downstream device routing table, and generates a PFCP Session Establishment Request message based on the target downstream device routing table and the tunnel protocol response information, and gives the downstream device routing information and L2TP link establishment information it carries to the routing forwarding module UPF, so as to facilitate the subsequent establishment of a communication tunnel and secondary AAA authentication.

[0098] Step S50: the routing forwarding module establishes a communication tunnel with the tunnel network module according to the tunnel protocol response information, and forwards the customized dialing information to the tunnel network module through the communication tunnel.

[0099] Step S60: The tunnel network module performs secondary authentication according to the customized dialing information.

[0100] Both the secondary AAA authentication and the primary AAA authentication use the RADIUS protocol for authentication. In order to improve the security of device networking, the data of the two AAA authentications are different. The primary AAA authentication is for dial-up requests, and the secondary AAA authentication is for user name and password verification.

[0101] Step S70: After the secondary authentication is passed, a networking session response is sent to the wireless networking device through the routing forwarding module to establish a VPDN communication tunnel between the wireless networking device and the server.

[0102] It is understandable that the networking session response includes at least information such as the authentication result and the fixed IP address allocated based on the SIM card number.

[0103] Further, sending a networking session response to the wireless networking device through the routing forwarding module includes:

[0104] Sending a second PFCP response message to the session management module through the routing forwarding module, wherein the second PFCP response message carries a networking session response;

[0105] The networking session response is sent to the wireless networking device through the first interface, or the networking session response is sent to the access and mobility management module through the second interface, so that the access and mobility management module forwards the networking session response to the wireless networking device.

[0106] UPF returns a PFCP Session Establishment Response message to SMF to report the L2TP session information, and transmits the information through the N1 interface (interface with the UE) and the N2 interface (interface with the RAN).

[0107] This embodiment performs an authentication by receiving a networking session request initiated by a wireless networking device to complete the necessary information configuration for networking. After the authentication is passed once, the control authentication module feeds back the tunnel protocol response information and the downstream device routing information to the session management module to synchronously realize the establishment of the communication channel and the subsequent routing of the downstream device of the wireless networking device. The session management module transmits the tunnel protocol response information and the downstream device routing information to the routing forwarding module, and establishes a communication tunnel between the tunnel network module according to the tunnel protocol response information through the routing forwarding module, so as to facilitate secondary authentication to improve the networking effect. After the secondary authentication is passed, the networking session response is sent to the wireless networking device through the routing forwarding module to complete the establishment of the communication tunnel, thereby simplifying the steps for establishing the traditional communication tunnel.

[0108] Based on the first embodiment of the present application, in the second embodiment of the present application, the same or similar contents as those in the above-mentioned embodiment 1 can be referred to the above introduction, and will not be repeated in the following. Figure 4 , after step S70, further comprising:

[0109] Step S80: In response to a communication request from a downlink device, an uplink data packet carried in the communication request is obtained.

[0110] Step S90: the routing forwarding module encapsulates the uplink data packet to obtain an encapsulated uplink data packet.

[0111] Step S100: Send the encapsulated uplink data packet to the tunnel network module through the VPDN tunnel.

[0112] Step S110: The tunnel network module decapsulates the encapsulated uplink data packet and forwards it to the server.

[0113] It should be noted that the reference Figure 5 , Figure 5 The flowchart of establishing VPDN tunnel and data uplink and downlink in this embodiment is shown in the figure. Specifically, the steps corresponding to each sequence number are as follows: 1. CPE initiates PDU session establishment request process, and the request message contains key information such as PDU session ID, key, protection algorithm, uplink and downlink maximum rate, SSC mode and IP type supported by the session; 2. Request SMF to create SM context; 3. SMF sends an authentication request message to AAA once; 4. AAA server authenticates the user once and sends corresponding information according to the user's contracted service type; after AAA authentication is passed, LNS information and the corresponding downstream device routing information of the user are sent in the response message, where LNS information is LNSIP, tunnel key, Hostname, etc.; 5. As a response to the PDU session establishment request, AMF is notified of the result of session establishment; 6. SMF inserts the routing information in the authentication response message into the SMF routing table and sends PFCP Session Establishment. The Request message carries the routing information of the downstream device and the L2TP link establishment information to UPF; 7. Tunnel establishment process; 8. Session establishment process; 9. Secondary AAA authentication, complete the username and password verification, assign a fixed IP and return the authentication result; 10. Address negotiation process; 11. UPF returns PFCP SessionEtablishment to SMF Response message reports L2TP session information; 12. Information is transmitted through N1 interface (interface with UE) and N2 interface (interface with RAN); 13. AMF responds to CPE's PDU session establishment request, and the session establishment process is completed; 14. Downlink devices such as PC initiate uplink services, and CPE turns off the NAT function to directly forward uplink data packets; 15. UPF receives the uplink message from the downlink device and encapsulates it and sends it to the LNS side through the VPDN tunnel. LNS decapsulates and forwards the data message to the intranet server; 16. The DN side server sends downlink data to the downlink device, and the data is encapsulated by LNS and sent to the UPF side through the VPDN tunnel; 17. UPF receives the downlink message matching the PDU session and forwards the downlink data message directly to CPE according to the routing information; CPE sends the downlink message to the corresponding downlink device.

[0114] When a downstream device such as a terminal device initiates an uplink service, the CPE turns off the NAT function and forwards the uplink data packet directly to the routing forwarding module UPF. After the routing transit module UPF completes the encapsulation, it sends the pre-established VPDN tunnel for the encapsulated uplink data packet to the tunnel network module for information transfer and decapsulation to achieve interconnection with the Internet.

[0115] Furthermore, the post-routing networking method based on 5G VPDN also includes:

[0116] Receiving a downlink data packet sent by the server;

[0117] The tunnel network module encapsulates the downlink data packet to obtain an encapsulated downlink data packet;

[0118] The tunnel network module sends the encapsulated downlink data packet to the routing forwarding module through the VPDN tunnel;

[0119] The routing forwarding module decapsulates the encapsulated downlink data packet to obtain a downlink data message and routing information;

[0120] The downlink data message is sent to the wireless networking device based on the routing information, so that the wireless networking device forwards the downlink data message to the downlink device corresponding to the routing information.

[0121] In the specific implementation, the DN side server sends downlink data to the downstream device. The data is encapsulated by the LNS and sent to the UPF side through the VPDN tunnel. The UPF receives the downlink message and matches the PDU session. According to the routing information, the downlink data message is directly forwarded to the CPE. The CPE sends the downlink message to the corresponding downstream device.

[0122] Furthermore, the post-routing networking method based on 5G VPDN also includes:

[0123] Performing networking data configuration on the wireless networking device and the downstream device of the wireless networking device;

[0124] The networking data configuration includes domain name configuration and number card configuration.

[0125] In the specific implementation, refer to Figure 6 , Figure 6 This is the networking data configuration flow chart of this embodiment. Before the device is connected, the networking data configuration needs to be completed on the networking management platform. The networking data configuration is mainly divided into two parts: domain name configuration and number card configuration.

[0126] The domain name configuration completes the activation of the customized dial-up information DNN and the configuration of the VPDN domain name. The general domain name is consistent with the name of the customized dial-up information DNN. When the customized dial-up information DNN is activated, the DNN configuration instructions are sent to the UDM, SMF and UPF. The customized dial-up information DNN is bound to the public DNN used for platform management in the UDM network element, and a new multi-DNN template is created for number card signing; SMF is configured to the radius configuration of the primary AAA, the DNN turns on the post-routing switch, and the UPF switch is turned on synchronously. The VPDN domain name configuration instructions are sent to the primary AAA and secondary AAA. The domain name data is used for access authentication of wireless devices and LNS tunnel docking. If the post-routing function is enabled, turn on the post-routing switch under the domain name corresponding to the primary AAA.

[0127] After the domain name is configured, the card contract is completed. The networking platform performs the binding of wireless devices and cards and the configuration management of downstream devices. UDM contracts multiple DNN templates and configures machine-card binding, so that the wireless access device completes the binding with the SIM card during the registration phase after power-on. The domain name has been configured for the first AAA contract, and the corresponding user name and password are configured for each VPDN access card. The access card is configured with the downstream device address segment. The address routing information will be issued during the first AAA authentication phase of session creation. The domain name has been configured for the second AAA contract, and the corresponding user name and password are configured for each VPDN access card, and a fixed IP is assigned. In order to ensure the security of access to wireless access devices and downstream devices, the binding of wireless access devices and number cards is completed on the networking management platform, and black and white list functions are provided for the downstream devices of the wireless access devices to further enhance the security of the branch point wireless access network. The platform also provides other CPE-related settings.

[0128] This embodiment obtains the uplink data packet carried in the communication request by responding to the communication request of the downstream device; the routing forwarding module encapsulates the uplink data packet to obtain an encapsulated uplink data packet; the encapsulated uplink data packet is sent to the tunnel network module through the VPDN tunnel; the tunnel network module decapsulates the encapsulated uplink data packet and forwards it to the server, and realizes terminal-server data uplink through the established VPDN tunnel, thereby achieving secure access to enterprise intranet resources.

[0129] This application also provides a post-routing networking device based on 5G VPDN, please refer to Figure 7 , the post-routing networking device based on 5G VPDN includes:

[0130] The information sending module 10 is used to send customized dialing information corresponding to the wireless networking device to the wireless networking device in response to a registration request initiated by the wireless networking device.

[0131] The primary authentication module 20 is used to receive a networking session request initiated by the wireless networking device through the access and mobility management module, and perform a primary authentication according to the networking session request.

[0132] The information feedback module 30 is used for the authentication module to feed back tunnel protocol response information and downlink device routing information to the session management module after the authentication is passed once.

[0133] The information forwarding module 40 is used for the session management module to transmit the tunnel protocol response information and the downlink device routing information to the routing forwarding module.

[0134] The tunnel establishing module 50 is used for the routing forwarding module to establish a communication tunnel with the tunnel network module according to the tunnel protocol response information, and forward the customized dialing information to the tunnel network module through the communication tunnel.

[0135] The secondary authentication module 60 is used for the tunnel network module to perform secondary authentication according to the customized dialing information.

[0136] The response feedback module 70 is used to send a networking session response to the wireless networking device through the routing forwarding module after the secondary authentication is passed, so as to establish a VPDN communication tunnel between the wireless networking device and the server.

[0137] This embodiment performs an authentication by receiving a networking session request initiated by a wireless networking device to complete the necessary information configuration for networking. After the authentication is passed once, the control authentication module feeds back the tunnel protocol response information and the downstream device routing information to the session management module to synchronously realize the establishment of the communication channel and the subsequent routing of the downstream device of the wireless networking device. The session management module transmits the tunnel protocol response information and the downstream device routing information to the routing forwarding module, and establishes a communication tunnel between the tunnel network module according to the tunnel protocol response information through the routing forwarding module, so as to facilitate secondary authentication to improve the networking effect. After the secondary authentication is passed, the networking session response is sent to the wireless networking device through the routing forwarding module to complete the establishment of the communication tunnel, thereby simplifying the steps for establishing the traditional communication tunnel.

[0138] In one embodiment, the information forwarding module 40 is also used for the session management module to insert the downstream device routing information into the downstream device routing table to obtain the target downstream device routing table; generate the first PFCP response information according to the target downstream device routing table and the tunnel protocol response information; and transmit the first PFCP response information to the routing forwarding module.

[0139] In one embodiment, the information sending module 10 is also used to establish a public data network channel with the wireless access device; receive terminal information and SIM card information of the wireless access device through the public data network channel; generate customized dialing information based on the terminal information and SIM card information; and send the customized dialing information to the wireless networking device through the public data network channel.

[0140] In one embodiment, the response feedback module 70 is also used to send a second PFCP response message to the session management module through the routing forwarding module, wherein the second PFCP response message carries a networking session response; send the networking session response to the wireless networking device through the first interface, or send the networking session response to the access and mobility management module through the second interface, so that the access and mobility management module forwards the networking session response to the wireless networking device.

[0141] In one embodiment, the response feedback module 70 is also used to respond to the communication request of the downstream device and obtain the uplink data packet carried in the communication request; the routing forwarding module encapsulates the uplink data packet to obtain an encapsulated uplink data packet; the encapsulated uplink data packet is sent to the tunnel network module through the VPDN tunnel; the tunnel network module decapsulates the encapsulated uplink data packet and forwards it to the server.

[0142] In one embodiment, the response feedback module 70 is also used to receive a downlink data packet sent by the server; the tunnel network module encapsulates the downlink data packet to obtain an encapsulated downlink data packet; the tunnel network module sends the encapsulated downlink data packet to the routing forwarding module through the VPDN tunnel; the routing forwarding module decapsulates the encapsulated downlink data packet to obtain a downlink data message and routing information; based on the routing information, the downlink data message is sent to the wireless networking device, so that the wireless networking device forwards the downlink data message to the downstream device corresponding to the routing information.

[0143] In one embodiment, the response feedback module 70 is further used to perform networking data configuration on the to-be-networked device connected to the wireless networking device; the networking data configuration includes domain name configuration and number card configuration.

[0144] The present application provides a post-routing networking device based on 5G VPDN, and the post-routing networking device based on 5G VPDN includes: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute the post-routing networking method based on 5G VPDN in the above-mentioned embodiment 1.

[0145] Reference below Figure 8 , which shows a schematic diagram of the structure of a 5G VPDN-based back-routing networking device suitable for implementing the embodiment of the present application. The 5G VPDN-based back-routing networking device in the embodiment of the present application may include but is not limited to mobile terminals such as mobile phones, laptops, digital broadcast receivers, PDAs (Personal Digital Assistants), PADs (Portable Application Descriptions), PMPs (Portable Media Players), vehicle-mounted terminals (such as vehicle-mounted navigation terminals), etc., and fixed terminals such as digital TVs, desktop computers, etc. Figure 8 The 5G VPDN-based post-routing networking device shown is merely an example and should not impose any limitations on the functionality and scope of use of the embodiments of the present application.

[0146] like Figure 8 As shown, the post-routing networking device based on 5G VPDN may include a processing device 1001 (e.g., a central processing unit, a graphics processor, etc.), which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM: Read Only Memory) 1002 or a program loaded from a storage device 1003 to a random access memory (RAM: Random Access Memory) 1004. In RAM1004, various programs and data required for the operation of the post-routing networking device based on 5G VPDN are also stored. The processing device 1001, ROM1002, and RAM1004 are connected to each other via a bus 1005. An input / output (I / O) interface 1006 is also connected to the bus. Typically, the following systems can be connected to the I / O interface 1006: input devices 1007 including, for example, a touch screen, a touchpad, a keyboard, a mouse, an image sensor, a microphone, an accelerometer, a gyroscope, etc.; output devices 1008 including, for example, a liquid crystal display (LCD), a speaker, a vibrator, etc.; storage devices 1003 including, for example, a magnetic tape, a hard disk, etc.; and communication devices 1009. The communication device 1009 can allow the 5G VPDN-based post-routing networking device to communicate wirelessly or wired with other devices to exchange data. Although the figure shows a 5G VPDN-based post-routing networking device with various systems, it should be understood that it is not required to implement or have all the systems shown. More or fewer systems may be implemented or have alternatively.

[0147] In particular, according to the embodiments disclosed in the present application, the process described above with reference to the flowchart can be implemented as a computer software program. For example, the embodiments disclosed in the present application include a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program includes a program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from a network through a communication device, or installed from a storage device 1003, or installed from a ROM 1002. When the computer program is executed by the processing device 1001, the above-mentioned functions defined in the method of the embodiment disclosed in the present application are executed.

[0148] The post-routing networking device based on 5G VPDN provided in this application adopts the post-routing networking method based on 5G VPDN in the above-mentioned embodiment, which can solve the technical problems of post-routing networking based on 5G VPDN. Compared with the prior art, the beneficial effects of the post-routing networking device based on 5G VPDN provided in this application are the same as the beneficial effects of the post-routing networking method based on 5G VPDN provided in the above-mentioned embodiment, and the other technical features in the post-routing networking device based on 5G VPDN are the same as the features disclosed in the method of the previous embodiment, which will not be repeated here.

[0149] It should be understood that the various parts disclosed in this application can be implemented by hardware, software, firmware or a combination thereof. In the description of the above embodiments, specific features, structures, materials or characteristics can be combined in any one or more embodiments or examples in a suitable manner.

[0150] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

[0151] The present application provides a computer-readable storage medium having computer-readable program instructions (i.e., computer programs) stored thereon, and the computer-readable program instructions are used to execute the post-routing networking method based on 5G VPDN in the above-mentioned embodiment.

[0152] The computer-readable storage medium provided in the present application may be, for example, a USB flash drive, but is not limited to electrical, magnetic, optical, electromagnetic, infrared, or semiconductor systems, systems or devices, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In this embodiment, the computer-readable storage medium may be any tangible medium containing or storing a program that can be used by or in combination with an instruction execution system, system or device. The program code contained on the computer-readable storage medium may be transmitted using any appropriate medium, including but not limited to: wires, optical cables, RF (Radio Frequency), etc., or any suitable combination of the above.

[0153] The above-mentioned computer-readable storage medium may be included in the back-routing networking device based on 5G VPDN; or it may exist independently without being assembled into the back-routing networking device based on 5G VPDN.

[0154] The above-mentioned computer-readable storage medium carries one or more programs. When the above-mentioned one or more programs are executed by the back-routing networking device based on 5G VPDN, the back-routing networking device based on 5G VPDN enables: back-routing networking based on 5G VPDN.

[0155] Computer program code for performing the operations of the present application may be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages ​​such as Java, Smalltalk, C++, and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0156] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present application. In this regard, each square box in the flow chart or block diagram can represent a module, a program segment or a part of a code, and the module, the program segment or a part of the code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the square box can also occur in a sequence different from that marked in the accompanying drawings. For example, two square boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each square box in the block diagram and / or flow chart, and the combination of the square boxes in the block diagram and / or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0157] The modules involved in the embodiments described in this application may be implemented by software or hardware, wherein the name of the module does not constitute a limitation on the unit itself in some cases.

[0158] The readable storage medium provided in this application is a computer-readable storage medium, which stores computer-readable program instructions (i.e., computer programs) for executing the above-mentioned post-routing networking method based on 5G VPDN, and can solve the technical problems of post-routing networking based on 5G VPDN. Compared with the prior art, the beneficial effects of the computer-readable storage medium provided in this application are the same as the beneficial effects of the post-routing networking method based on 5G VPDN provided in the above-mentioned embodiment, and will not be repeated here.

[0159] The present application also provides a computer program product, including a computer program, which, when executed by a processor, implements the steps of the above-mentioned 5G VPDN-based post-routing networking method.

[0160] The computer program product provided in this application can solve the technical problem of post-routing networking based on 5G VPDN. Compared with the prior art, the beneficial effects of the computer program product provided in this application are the same as the beneficial effects of the post-routing networking method based on 5G VPDN provided in the above embodiment, which will not be repeated here.

[0161] The above descriptions are only some embodiments of the present application, and are not intended to limit the patent scope of the present application. All equivalent structural changes made using the contents of the present application specification and drawings under the technical concept of the present application, or direct / indirect applications in other related technical fields are included in the patent protection scope of the present application.

Claims

1. A post-routing networking method based on 5G VPDN, characterized in that: The post-routing networking method based on 5GVPDN is applied to a networking management server, and the networking management server at least includes: an access and mobility management module, a session management module, a routing forwarding module, a tunnel network module and an authentication module; The post-routing networking method based on 5G VPDN includes: In response to a registration request initiated by a wireless networking device, sending customized dialing information corresponding to the wireless networking device to the wireless networking device; Receiving a networking session request initiated by the wireless networking device through the access and mobility management module, and performing an authentication according to the networking session request; After the authentication is passed once, the authentication module feeds back tunnel protocol response information and downlink device routing information to the session management module; The session management module transmits the tunnel protocol response information and the downlink device routing information to the routing forwarding module; The routing forwarding module establishes a communication tunnel with the tunnel network module according to the tunnel protocol response information, and forwards the customized dialing information to the tunnel network module through the communication tunnel; The tunnel network module performs secondary authentication according to the customized dialing information; After the secondary authentication is passed, a networking session response is sent to the wireless networking device through the routing forwarding module to establish a VPDN communication tunnel between the wireless networking device and the server.

2. The post-routing networking method based on 5G VPDN as claimed in claim 1, characterized in that: The session management module transmits the tunnel protocol response information and the downlink device routing information to the routing forwarding module, including: The session management module inserts the downstream device routing information into the downstream device routing table to obtain the target downstream device routing table; Generate first PFCP response information according to the target downlink device routing table and the tunnel protocol response information; The first PFCP response information is transmitted to the routing forwarding module.

3. The post-routing networking method based on 5G VPDN as claimed in claim 1, characterized in that: The step of sending customized dialing information corresponding to the wireless networking device to the wireless networking device in response to a registration request initiated by the wireless networking device includes: Establishing a public data network channel with the wireless access device; Receiving terminal information and SIM card information of the wireless access device through the public data network channel; Generate customized dialing information based on the terminal information and SIM card information; The customized dialing information is sent to the wireless networking device through the public data network channel.

4. The post-routing networking method based on 5G VPDN as claimed in claim 1, characterized in that: The sending a networking session response to the wireless networking device through the routing forwarding module includes: Sending a second PFCP response message to the session management module through the routing forwarding module, wherein the second PFCP response message carries a networking session response; The networking session response is sent to the wireless networking device through the first interface, or the networking session response is sent to the access and mobility management module through the second interface, so that the access and mobility management module forwards the networking session response to the wireless networking device.

5. The post-routing networking method based on 5G VPDN according to any one of claims 1 to 4, characterized in that: The post-routing networking method based on 5G VPDN also includes: In response to a communication request from a downlink device, obtaining an uplink data packet carried in the communication request; The routing and forwarding module encapsulates the uplink data packet to obtain an encapsulated uplink data packet; Sending the encapsulated uplink data packet to the tunnel network module via the VPDN tunnel; The tunnel network module decapsulates the encapsulated uplink data packet and forwards it to the server.

6. The post-routing networking method based on 5G VPDN as claimed in claim 5, characterized in that: The post-routing networking method based on 5G VPDN also includes: Receiving a downlink data packet sent by the server; The tunnel network module encapsulates the downlink data packet to obtain an encapsulated downlink data packet; The tunnel network module sends the encapsulated downlink data packet to the routing forwarding module through the VPDN tunnel; The routing forwarding module decapsulates the encapsulated downlink data packet to obtain a downlink data message and routing information; The downlink data message is sent to the wireless networking device based on the routing information, so that the wireless networking device forwards the downlink data message to the downlink device corresponding to the routing information.

7. The post-routing networking method based on 5G VPDN as claimed in claim 5, characterized in that: The post-routing networking method based on 5G VPDN also includes: Performing networking data configuration on the wireless networking device and the device connected to the wireless networking device; The networking data configuration includes domain name configuration and number card configuration.

8. A post-routing networking device based on 5G VPDN, characterized in that: The post-routing networking device based on 5GVPDN includes: An information sending module, used for sending customized dialing information corresponding to the wireless networking device to the wireless networking device in response to a registration request initiated by the wireless networking device; A primary authentication module, configured to receive a networking session request initiated by the wireless networking device through the access and mobility management module, and perform a primary authentication according to the networking session request; An information feedback module, configured to, after the authentication is passed once, cause the authentication module to feed back tunnel protocol response information and downlink device routing information to the session management module; An information forwarding module, used for the session management module to transmit the tunnel protocol response information and the downlink device routing information to the routing forwarding module; A tunnel establishment module, used for the routing forwarding module to establish a communication tunnel with the tunnel network module according to the tunnel protocol response information, and forward the customized dialing information to the tunnel network module through the communication tunnel; A secondary authentication module, used for the tunnel network module to perform secondary authentication according to the customized dialing information; The response feedback module is used to send a networking session response to the wireless networking device through the routing forwarding module after the secondary authentication is passed, so as to establish a VPDN communication tunnel between the wireless networking device and the server.

9. A post-routing networking device based on 5G VPDN, characterized in that: The post-routing networking device based on 5G VPDN includes: a memory, a processor, and a post-routing networking program based on 5G VPDN stored in the memory and executable on the processor, wherein the post-routing networking program based on 5G VPDN is configured to implement the post-routing networking method based on 5G VPDN as described in any one of claims 1 to 7.

10. A storage medium, characterized in that: The storage medium stores a post-routing networking program based on 5G VPDN, and when the post-routing networking program based on 5G VPDN is executed by the processor, the post-routing networking method based on 5G VPDN is implemented as described in any one of claims 1 to 7.

Images